Threat Hunter Investigator

Responsibilities: of the Threat Hunter Investigator: Conduct proactive threat hunting and insider threat investigations leveraging logs, endpoint data, user activity, and behavioral analytics. Investigate potential intellectual property theft, data loss, and other insider risk events, documenting findings and recommendations. Develop and tune advanced threat detections within Splunk Enterprise Security using SPL. Build and maintain Risk-Based Alerting (RBA) use cases, correlation searches, and automated response workflows. Configure and optimize UEBA models and behavioral detections across endpoint, cloud, network, and application environments. Create technical documentation, runbooks, and detection content while continuously improving alert quality and coverage aligned to MITRE ATT&CK. Qualifications: of the Threat Hunter Investigator: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field. 8+ years of experience conducting cyber investigations, insider threat analysis, and digital forensic investigations. Strong hands-on experience with Splunk Enterprise Security, including detection engineering and threat hunting. Advanced experience writing SPL queries and developing custom detections and correlation searches. Experience with RBA and UEBA, including risk scoring, anomaly detection, and behavioral analytics. Strong understanding of threat hunting methodologies and translating threat intelligence into actionable detections. Compensation: & Benefits: Base salary ranging from $140,000 - $165,000 Comprehensive benefits package including Medical, Dental, Vision, 401(k), PTO, paid holidays, and additional leave offerings where applicable